ourdoings.com "Agrees not to use or disclose your personal information, or the personal information of others who use your site, without permission for any purpose other than providing and improving this service, except as required by law."

If someone breaks into the datacenter and physically steals the server (a more realistic scenario than the server being hacked) I don't think that would count as "disclosing". But I'm in Massachusetts where courts seem to have a higher-than-average degree of common sense.